15869 Commits (ffca66d5df2b19e148e2767d7c112a0ba8916c5c)

 

All Branches   

Search

Author	SHA1	Message	Date
Dhia Ayachi	2801785710	regenerate expired certs (#11462) ... * regenerate expired certs * add documentation to generate tests certificates	3 years ago
trujillo-adam	138f9f31e6	Apply suggestions from code review ... fixed typos Co-authored-by: Blake Covarrubias <blake@covarrubi.as>	3 years ago
Jared Kirschner	0854e1d684	Merge pull request #11348 from kbabuadze/fix-answers-alt-domain ... Fix answers for alt domain	3 years ago
David Yu	1dcb949306	docs: add -verbose flag for install command (#11447)	3 years ago
99	0402cc16bf	PR fixes	3 years ago
R.B. Boyer	61361c2e5d	cli: update consul members output to display partitions and sort the results usefully (#11446)	3 years ago
R.B. Boyer	c8cafb7654	agent: for various /v1/agent endpoints parse the partition parameter on the request (#11444) ... Also update the corresponding CLI commands to send the parameter appropriately. NOTE: Behavioral changes are not happening in this PR.	3 years ago
R.B. Boyer	af9ffc214d	agent: add a clone function for duplicating the serf lan configuration (#11443)	3 years ago
Mark Anderson	977be77493	Fix back compat issues with UDS config (#11318) ... SocketPath needs to be omitted when empty to avoid confusing older versions of Consul Signed-off-by: Mark Anderson <manderson@hashicorp.com>	3 years ago
David Yu	823026e319	docs: revised Helm install to create namespace and install on dedicated namespace (#11440) ... * docs: revised Helm install to create namespace and install on dedicated Consul namespace * Update website/content/docs/k8s/installation/install.mdx Co-authored-by: mrspanishviking <kcardenas@hashicorp.com> * Update install.mdx * changing to Helm 3.2+ as a pre-req to make it easier to follow * might as well bump to latest version Co-authored-by: mrspanishviking <kcardenas@hashicorp.com>	3 years ago
Daniel Nephin	367b664318	Add tests for cert expiry metrics	3 years ago
trujillo-adam	bb18625219	applying admin partitions feedback related to ACLs; additional immprovments to ACL rule docs	3 years ago
99	26f53e82b5	Update .github/workflows/build.yml ... Co-authored-by: Daniel Nephin <dnephin@hashicorp.com>	3 years ago
Daniel Nephin	210d37e4ab	Merge pull request #10671 from hashicorp/dnephin/fix-subscribe-test-flake ... subscribe: improve TestSubscribeBackend_IntegrationWithServer_DeliversAllMessages	3 years ago
Daniel Nephin	96a31df5c8	Merge pull request #11255 from hashicorp/dnephin/fix-auth-verify-incoming ... tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true	3 years ago
sidzi	29f192a130	Refactor requireHttpCodes for segregated error handling (#11287)	3 years ago
Kim Ngo	0c0460b53f	CTS document manual apply (#11426) ... * CTS document manual apply * Add Consul-Terraform-Sync parentheses to CTS acronym * Add tf link for run notifications	3 years ago
Evan Culver	61be9371f5	connect: Remove support for Envoy 1.16 (#11354)	3 years ago
Evan Culver	bec08f4ec3	connect: Add support for Envoy 1.20 (#11277)	3 years ago
Freddy	ab425e3ca1	Merge pull request #11436 from hashicorp/api/exports-marshal ... [OSS] Ensure partition-exports kind gets marshaled	3 years ago
99	1732861848	Update release branch to 1.11.x	3 years ago
freddygv	4c45cafce2	Update filename to match entry kind - mesh	3 years ago
freddygv	ac96ce6552	Ensure partition-exports kind gets marshalled ... The api module has decoding functions that rely on 'kind' being present of payloads. This is so that we can decode into the appropriate api type for the config entry. This commit ensures that a static kind is marshalled in responses from Consul's api endpoints so that the api module can decode them.	3 years ago
Daniel Nephin	a8e2e1c365	agent: move agent tls metric monitor to a more appropriate place ... And add a test for it	3 years ago
Daniel Nephin	c92513ec16	telemetry: set cert expiry metrics to NaN on start ... So that followers do not report 0, which would make alerting difficult.	3 years ago
Daniel Nephin	9264ce89d2	telemetry: fix cert expiry metrics by removing labels ... These labels should be set by whatever process scrapes Consul (for prometheus), or by the agent that receives them (for datadog/statsd). We need to remove them here because the labels are part of the "metric key", so we'd have to pre-declare the metrics with the labels. We could do that, but that is extra work for labels that should be added from elsewhere. Also renames the closure to be more descriptive.	3 years ago
Daniel Nephin	7948720bbb	telemetry: only emit leader cert expiry metrics on the servers	3 years ago
Daniel Nephin	7fe60e5989	telemetry: prevent stale values from cert monitors ... Prometheus scrapes metrics from each process, so when leadership transfers to a different node the previous leader would still be reporting the old cached value. By setting NaN, I believe we should zero-out the value, so that prometheus should only consider the value from the new leader.	3 years ago
Daniel Nephin	0cc58f54de	telemetry: improve cert expiry metrics ... Emit the metric immediately so that after restarting an agent, the new expiry time will be emitted. This is particularly important when this metric is being monitored, because we want the alert to resovle itself immediately. Also fixed a bug that was exposed in one of these metrics. The CARoot can be nil, so we have to handle that case.	3 years ago
Daniel Nephin	a3c781682d	subscribe: attempt to fix a flaky test ... TestSubscribeBackend_IntegrationWithServer_DeliversAllMessages has been flaking a few times. This commit cleans up the test a bit, and improves the failure output. I don't believe this actually fixes the flake, but I'm not able to reproduce it reliably. The failure appears to be that the event with Port=0 is being sent in both the snapshot and as the first event after the EndOfSnapshot event. Hopefully the improved logging will show us if these are really duplicate events, or actually different events with different indexes.	3 years ago
Freddy	fbcf9f3f6c	Merge pull request #11435 from hashicorp/ent-authorizer-refactor ... [OSS] Export ACLs refactor	3 years ago
Freddy	303532825f	Merge pull request #11432 from hashicorp/ap/exports-mgw ... [OSS] Update mesh gateways to handle partitions	3 years ago
freddygv	43360eb216	Rework acl exports interface	3 years ago
freddygv	0a4ff4bb91	Prefer concrete policyAuthorizer type ... There will only ever be policyAuthorizers embedded in namespaceAuthorizers, this commit swaps out the interface in favor of the concrete type.	3 years ago
Freddy	ec7e94d129	Merge pull request #11433 from hashicorp/exported-service-acls ... [OSS] acl: Expand ServiceRead and NodeRead to account for partition exports	3 years ago
freddygv	e93c144d2f	Update comments	3 years ago
Daniel Nephin	4afc24268d	tlsutil: only AuthorizerServerConn when VerifyIncomingRPC is true ... See github.com/hashicorp/consul/issues/11207 When VerifyIncomingRPC is false the TLS conn will not have the required certificates.	3 years ago
Freddy	a8762be529	Merge pull request #11431 from hashicorp/ap/exports-proxycfg ... [OSS] Update partitioned mesh gw handling for connect proxies	3 years ago
Freddy	b1b6f682e1	Merge pull request #11416 from hashicorp/ap/exports-update ... Rename service-exports to partition-exports	3 years ago
freddygv	3a2061544d	Fixup partitions assertion	3 years ago
freddygv	9480670b72	Fixup imports	3 years ago
freddygv	c72bbb6e8d	Split up locality check from hostname check	3 years ago
freddygv	d28b9052b2	Move the exportingpartitions constant to enterprise	3 years ago
freddygv	448701dbd8	Replace default partition check	3 years ago
freddygv	12923f5ebc	PR comments	3 years ago
freddygv	327e6bff25	Leave todo about default name	3 years ago
freddygv	5bf2497f71	Add oss impl of registerEntCache	3 years ago
freddygv	954d21c6ba	Register the ExportingPartitions cache type	3 years ago
freddygv	a33b6923e0	Account for partitions in xds gen for mesh gw ... This commit avoids skipping gateways in remote partitions of the local DC when generating listeners/clusters/endpoints.	3 years ago
freddygv	935112a47a	Account for partition in SNI for gateways	3 years ago